REMARKS 

Applicants have canceled claims 1-22 and 33-42 during prosecution of this patent 
application. Applicants are not conceding in this patent application that said canceled claims are 
not patentable over prior art cited by the Examiner, since the claim cancellations are only for 
facilitating expeditious prosecution of this patent application. Applicants respectfully reserve the 
right to pursue said canceled claims, and other claims, in one or more continuations and/or 
divisional patent applications. 

The Examiner rejected claims 23-25 and 27-32 under 35 U.S.C. § 102(e) as allegedly 
being anticipated by United States Patent No. 6,453,353 to Win et al., hereinafter Win. 

The Examiner rejected claim 26 under 35 U.S.C. § 103(a) as allegedly being unpatentable 
over Win as applied to claim 23, as cited above, and further in view of United States Patent No. 
6,834,272 to Naor et al., hereinafter Naor. 

Applicants respectfully traverse the § 102 and § 103 rejections with the following 
arguments. 
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35 ILS.C. § 102(e) 

The Examiner rejected claims 23-25 and 27-32 under 35 U.S.C. § 102(e) as allegedly 
being anticipated by United States Patent No. 6,453,353 to Win et al., hereinafter Win. 

As to claim 23, the Examiner has not responded to Applicants' request that the Examiner 
identify specific entities in Win the following items appearing in claim 23 (except for "virtual ID 

token"): 

(1) "user device"; 

(2) "virtual ID token"; 

(3) "data record"; 

(4) "database"; 

(5) "L attributes of the subscriber, L being at least 2"; 

(6) "M attributes of the L attributes, M being less than L"; 

(7) "virtual record"; and 

(8) "virtual ID". 

The Examiner's lack of identification of the preceding items in Win makes it impossible 
for Applicants to comprehend and evaluate the Examiner's arguments in relation to the 
Examiner's citations of Win, because all that the Examiner has done is to cite blocks of text in 
Win without any accompanying analysis of how the cited blocks of text teach the claimed 
features. The test of whether Win teaches claim 23 requires identifying specifically what entities 
in Win allegedly represent each term or phrase in claim 23 and then determining whether or not 
application of these entities in Win to claim 23 satisfies claim 23 in a logically consistent 
manner. Unfortunately, the Examiner's current arguments lack the necessary specificity and are 
thus vague and unclear. 
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In order to promote efficient prosecution of the present patent application, Applicants 
respectfully reiterate Applicants' previous request that the Examiner identify specific entities in 
Win that allegedly represent the preceding 8 items recited in claim 23, so that Applicants can 
comprehend and evaluate the Examiner's arguments. 

In addition, Applicants respectfully request that the Examiner identify specific entities in 
Win that allegedly represent the limitations and features of the dependent claims 24-32. 

The only item in the preceding list of 8 entities that the Examiner identified in Win is 
"virtual ID token" which the Examiner alleges to be "an association of each resource in one or 
mor roles". Win, col. 2, lines 55-56 explains that "role" relates to the user's role in an enterprise. 
Therefore, the Examiner is alleging that the claimed "virtual ID token" is an association of e,ach 
resource in one or more roles of the user in the enterprise. 

Applicants respectfully contend that Win does not anticipate claim 23, because Win does 
not teach each and every feature of claim 23. 

As a first example of why Win does not anticipate claim 23, Win does not teach the 
feature: "receiving a request from a user device via a network for a virtual ID token relating to 
attribute information pertaining to a subscriber associated with the user device". Given the 
Examiner's interpretation of "token" in Win, the preceding feature to search for in Win is: 
receiving a request from a user device via a network for an association of each resource in one or 
more roles of the user, said token relating to attribute information pertaining to a subscriber 
associated with the user device. 
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The Examiner argues that Win teaches the preceding feature of claim 23 in Win, Figures 
5 A, 5C, and col. 2, lines 42-67. 

In response, Applicants acknowledge that Win describes storing in a database information 
describing the role of a user (Win, col. 2, 57-58). However, Applicants cannot find a teaching of 
receiving of the request for the preceding information concerning the role of the user in Win, 
Figures 5A, 5C, and col. 2, lines 42-67. Applicants cannot find receiving of a request of any 
kind in Win, Figures 5 A, 5C, and col. 2, lines 42-67. 

Applicants request that the Examiner identify quoted language in Win that allegedly 
teaches the claimed receiving of the request of information pertaining to an association of each 
resource in one or more roles of the user. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 23. 

Accordingly, Win does not teach the preceding feature of claim 23. 

As a second example of why Win does not anticipate claim 23, Win does not teach the 
feature: "responsive to the request for the virtual ID token, reading a data record from a database, 
said data record comprising L attributes of the subscriber, L being at least 2". 

The Examiner argues that Win teaches the preceding feature of claim 23 in Win, Figures 
5a, 5b and 5e, column 10, lines 14-26 and 41-55, column 11 and lines 42-64. 

In response, Applicants note that the Examiner has not revealed specifically what the 
Examiner considers in Win to represent the claimed data record in Win, Figures 5a, 5b and 5e, 
column 10, lines 14-26 and 41-55, column 1 1 and lines 42-64, which makes the Examiner's 
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argument vague and unclear. 

In further response, Applicants note that the Examiner has not specifically identified in 
Win the L attributes comprised by the data record, which makes the Examiner's argument vague 
and unclear. 

In the absence of clarity by the Examiner, Applicants assume that the Examiner considers 
the reading of a user profile in step 538 of Win, Figure 5E to represent the claimed "reading a 
data record". However, Win, Figures 5a, 5b and 5e, column 10, lines 14-26 and 41-55, column 
1 1 and lines 42-64 does not teach that the user profile comprises at least 2 attributes, as required 
by claim 23. 

Furthermore, Figures 5a, 5b and 5e, column 10, lines 14-26 and 41-55, column 1 1 and 
lines 42-64 does not teach that reading of a user profile in step 538 of Win is "responsive to the 
request for the virtual ID token" as required by claim 23, wherein the "request" is the request 
recited in the claimed "receiving the request" step. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 23. 

Accordingly, Win does not teach the preceding feature of claim 23. 

As a third example of why Win does not anticipate claim 23, Win does not teach the 
feature: "providing the data record to the user device via the network". 

The Examiner argues: "Win teaches ... providing the data record to the user device via the 
network (Figures 1, 2 and 6-8, column 5, lines 1-12 and column 26, lines 14-67, "remote 
computer can load the instructions into its dynamic memory and send the instructions over a 
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telephone line via modem" "Communication interface 918 provides a two-way data 
communication coupling to a network link 920 that is connected to a local network 922" and 
"Network link 920 typically provides data communication through one or more networks to other 
data devices")". 

In response, Applicants assert that the preceding quote from Win by the Examiner is 
taken from a discussion of a generic computer system. This discussion of a generic computer 
system does not teach "providing the data record to the user device via the network" wherein the 
"data record" is the same data record as appears in the feature of "reading a data record from a 
database". 

Under Applicants' assumption stated supra that the user profile read in step 538 of Win, 
Figure 5E represents the claimed data record, Applicants note that in Win, FIG. 5E the user 
profile is not provided to the user device (as required in the preceding feature of claim 23) but 
rather is provided to the registry server in step 108. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 23. 

Accordingly, Win does not teach the preceding feature of claim 23. 

As a fourth example of why Win does not anticipate claim 23, Win does not teach the 
feature: "receiving, from the user device via the network, a selection of M attributes of the L 
attributes, M being less than L". 

The Examiner argues: "Win teaches ... receiving, from the user device via the network, a 
selection of M attributes of the L attributes, M being less than L (Figure 10b, column 26, lines 
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14-67, "remote computer can load the instructions into its dynamic memory and send the 
instructions over a telephone line via a modem" "Communication interface 918 provides a 
two-way data communication coupling to a network link 920 that is connected to a local network 
922" and "Network link 920 typically provides data communication through one or more 
networks to other data devices")". 

In response, Applicants note that the Examiner has not specifically identified in Win: the 
M attributes selected from the data record, which makes the Examiner's argument vague and 
unclear. The Examiner has not even identified the data record. In Win 

Applicants assert that the preceding quote from Win by the Examiner is taken from a 
discussion of a discussion of a generic computer system that is totally silent as to the claimed 
"selection of M attributes of the L attributes, M being less than L". 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 23. 

Accordingly, Win does not teach the preceding feature of claim 23. 

As a fifth example of why Win does not anticipate claim 23, Win does not teach the 
feature: "generating a virtual record including the M attributes selected from the data record, said 
virtual record comprising a virtual ID (VID) for identifying the virtual record". 

The Examiner argues that Win teaches the preceding feature of claim 23 in Win, Figures 
10a- 10c, column 12, lines 32-55 and column 15, lines 35-52. 

In response, Applicants assert that the Examiner has not specifically identified which 
content in Win, Figures lOa-lOc, column 12, lines 32-55 and column 15, lines 35-52 allegedly 
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represents the claimed virtual record and the allegedly included virtual ID and M attributes. 
Therefore, Applicants cannot evaluate the Examiner's argument, especially since the M attributes 
in the virtual record are required by the language of claim 23 to be the same M attributes 
received from the user device. Therefore, the preceding argument by the Examiner argument is 
not persuasive. 

The Examiner has not even identified what allegedly represents the virtual ID in Win. 
The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 23. 

Accordingly, Win does not teach the preceding feature of claim 23. 

As a sixth example of why Win does not anticipate claim 23, Win does not teach the 
feature: "storing the generated virtual record in the database". 

The Examiner argues: "Win teaches ... storing the generated virtual record in the database 
(column 3, lines 7-40, "storing, in the database an association of each resource to one or more of 
the roles", column 5, lines 13-20, column 12, lines 32-55 and column 15, lines 35-52)". 

In response, Applicants assert that the Examiner's argument is inconsistent makes no 
sense. The Examiner argues that both the "virtual ID token" and the "generated virtual record are 
both "an association of each resource to one or more of the roles" and are therefore identical to 
each other. Win does not teach this and the Examiner has offered no evidence with 
accompanying analysis that Win teaches this. 

In other words, the Examiner is arguing that Win teaches receiving a request from a user 
device a token comprising "an association of each resource to one or more of the roles", reading 
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a data record in response to the request and providing the data record to the user device, receiving 
from the user device M of L attributes of the data record (M<L), generating a virtual record of the 
M attributes and storing the generated virtual record in the user device, wherein the "generated 
virtual record comprises the same information as the virtual ID token ("an association of each 
resource to one or more of the roles"). 

Applicants assert that Win does not teach the preceding scenario and the Examiner has 
not even attempted to provide analysis allegedly demonstrating that Win teaches the preceding 
scenario. The Examiner freely makes allegations, but provides absolutely no analysis to support 
the Examiner's allegations. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 23. 

Accordingly, Win does not teach the preceding feature of claim 23. 

As a seventh example of why Win does not anticipate claims 23, Win does not teach the 
feature: "providing the virtual ID token to the user device via the network, wherein the virtual ID 
token comprises the VID". 

The Examiner argues: "Win teaches ... providing the virtual ID token to the user device 
via the network, wherein the virtual ID token comprises the VID (Figures 1, 2 and 6-8, column 2, 
lines 42-67, column 5, lines 1-12 and column 26, lines 14-67, "remote computer can load the 
instructions into its dynamic memory and send the instructions over a telephone line via a 
modem" "Communication interface 918 provides a two-way data communication coupling to a 
network link 920 that is connected to a local network 922" and "Network link 920 typically 
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provides data communication through one or more networks to other data devices"". 

In response, Applicants assert that the preceding quote from Win by the Examiner is 
taken from a discussion of a generic computer system. Noting that the Examiner alleges that 
virtual ID token in Win is"an association of each resource to one or more of the roles of the user, 
Applicants assert that the preceding quote from Win does not teach providing the association of 
each resource to one or more of the roles to the user device via the network, wherein the 
association of each resource to one or more of the roles of the user comprises the VID. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 23. 

Accordingly, Win does not teach the preceding feature of claim 23. 

As an eighth example of why Win does not anticipate claim 23, Win does not teach the 
feature: "wherein an attribute information providing server performs said receiving the request 
for the virtual ID token, said reading the data record from the database, said providing the data 
record to the user device, said receiving the selection of M attributes, said generating the virtual 
record, said storing the generated virtual record in the database, and said providing the virtual ID 
token to the user device". 

The Examiner argues: "Win teaches ... wherein an attribute information providing server 
performs said receiving the request for the virtual ID token, said reading the data record from the 
database, said providing the data record to the user device, said receiving the selection of M 
attributes, said generating the virtual record, said storing the generated virtual record in the 
database, and said providing the virtual ID token to the user device (column 3, lines 7-40, 
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"storing, in the database an association of each resource to one or more of the roles", column 5, 
lines 13-20, column 11, lines 42-64, column 12, lines 32-55 and column 15, lines 35-52)." 

In response, Applicants assert that the Examiner has not properly addressed the preceding 
feature of claim 23. In particular, the Examiner has not identified an attribute information 
providing server (or any other server) that performs all of the recited steps (i.e., the steps of "said 
receiving the request for the virtual ID token, said reading the data record from the database, said 
providing the data record to the user device, said receiving the selection of M attributes, said 
generating the virtual record, said storing the generated virtual record in the database, and said 
providing the virtual ID token to the user device"). Therefore, the Examiner's argument is not 
relevant to the preceding feature of claim 23 and is therefore not persuasive. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 23. 

Accordingly, Win does not teach the preceding feature of claim 23. 

Based on the preceding arguments, Applicants respectfully maintain that Win does not 
anticipate claim 23, and that claim 23 is in condition for allowance. Since claims 24, 25 and 27- 
32 depend from claim 23, Applicants contend that claims 24, 25 and 27-32 are likewise in 
condition for allowance. 

In addition with respect to claim 24, Win does not teach the feature: "receiving a request 
comprising the VID for attribute information associated with the VID from an attribute 
information receiving apparatus via the network". 
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The Examiner argues: "Win teaches receiving a request comprising the VID for attribute 
information associated with the VID from an attribute information receiving apparatus via the 
network (Figures lOa-lOc, column 12, lines 32-55 and column 15, lines 35-52)". 

In response, Applicants note that the Examiner has not identified specifically what 
allegedly represents the VID in Win which makes the Examiner's argument vague and unclear. 

Applicants respectfully contend that Win, Figures lOa-lOc, col. 12, lines 32-55 and col. 15, 
lines 35-52 does not mention anything about a VID. 

In addition, Applicants respectfully contend that Win, Figures lOa-lOc, col. 12, lines 32-55 
and col. 15, lines 35-52 does not mention anything about receiving a request comprising the VID. 

In addition, Applicants respectfully contend that Win, Figures lOa-lOc, col. 12, lines 32-55 
and col. 15, lines 35-52 does not mention anything about receiving a request comprising the VID for 
attribute information associated with the VID. 

In addition, Applicants respectfully contend that Win, Figures lOa-lOc, col. 12, lines 32-55 
and col. 15, lines 35-52 does not mention anything about receiving a request comprising the VID for 
attribute information associated with the VID from an attribute information receiving apparatus via 
the network. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 24. 

Accordingly, Win does not teach the preceding feature of claim 24. 

In addition with respect to claim 24, Win does not teach the feature: "reading the virtual 
record from the database in response to the request comprising the VID". 
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The Examiner argues: "Win teaches ... reading the virtual record from the database in 
response to the request comprising the VID (column 3, lines 7-40, "storing, in the database an 
association of each resource to one or more of the roles", column 5, lines 13-20, column 11, lines 
42-64, column 12, lines 32-55 and column 15, lines 35-52). 

In response, Applicants assert that the Examiner has erroneously equated "storing" a 
record to "reading" a record. Therefore, the Examiner's argument is illogical. 

Furthermore, the Examiner makes the assumption both the virtual ID token and the 
virtual record comprises an association of each resource to one or more of the roles of the user, 
without examining this assumption is consistent with respect to the language of claim 24. 
Applicants assert that the preceding assumption by the Examiner is not logically consistent, 
because claim 23 recites generating the virtual record after the virtual ID token has already been 
previously generated. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 24. 

Accordingly, Win does not teach the preceding feature of claim 24. 

In addition with respect to claim 24, Win does not teach the feature: "after said reading, 
providing the virtual record to the attribute information receiving apparatus via the network". 

The Examiner argues: "Win teaches ... after said reading, providing the virtual record to 
the attribute information receiving apparatus via the network (Figures 1, 2 and 6-8, column 2, 
lines 42-67, column 5, lines 1-12 and column 26, lines 14-67, "remote computer can load the 
instructions into its dynamic memory and send the instructions over a telephone line via a 
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modem" "Communication interface 918 provides a two-way data communication coupling to a 
network link 920 that is connected to a local network 922" and "Network link 920 typically 
provides data communication through one or more networks to other data devices")". 

In response, Applicants assert that the Examiner has not specifically identified in Win the 
claimed virtual record. Therefore, the Examiner's argument is vague and unclear. In fact, the 
Examiner's argument does not even address the virtual record in the preceding feature of claim 
24. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 24. 

Accordingly, Win does not teach the preceding feature of claim 24. 

In addition with respect to claim 24, Win does not teach the feature: "wherein the 
attribute information providing server performs said receiving the request comprising the VID, 
said reading the virtual record from the database, and said providing the virtual record to the 
attribute information receiving apparatus". 

The Examiner argues: "Win teaches ... wherein the attribute information providing server 
performs said receiving the request comprising the VID, said reading the virtual record from the 
database, and said providing the virtual record to the attribute information receiving apparatus 
(column 2, lines 42-67, column 3, lines 7-40, "storing, in the database an association of each 
resource to one or more of the roles", column 5, lines 13-20, column 12, lines 32-55 and column 
15, lines 35-52)". 

In response, Applicants assert that the Examiner has not properly addressed the preceding 
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feature of claim 234 In particular, the Examiner has not identified an attribute information 
providing server (or any other server) that performs the recited steps of "said receiving the 
request comprising the VID, said reading the virtual record from the database, and said providing 
the virtual record to the attribute information receiving apparatus".. Therefore, the Examiner's 
argument is not relevant to the preceding feature of claim 24 and is therefore not persuasive. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 24. 

Accordingly, Win does not teach the preceding feature of claim 24. 

In addition with respect to claim 25, Win does not teach the feature: "wherein said 
providing the virtual record to the attribute information receiving apparatus is performed in 
manner that ensures that the virtual ID is concealed from the attribute information receiving 
apparatus when the virtual record is received by the attribute information receiving apparatus". 

The Examiner argues: "Regarding claim 25, Win teaches wherein said providing the 
virtual record to the attribute information receiving apparatus is performed in manner that 
ensures that the virtual ID is concealed from the attribute information receiving apparatus when 
the virtual record is received by the attribute information receiving apparatus (Figures 3b, 3c, 4, 
5a-5e and 6, column 6, lines 41-54, column 8, lines 23-63, column 9, lines 41-60 and column 10, 
lines 41-63)." 

In response, Applicants assert that the Examiner has not specifically identified in Win the 
claimed virtual record. Therefore, the Examiner's argument is vague and unclear. 

In addition, the Examiner has provided no analysis to demonstrate that\ Win (Figures 3b, 
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3c, 4, 5a-5e and 6, column 6, lines 41-54, column 8, lines 23-63, column 9, lines 41-60 and 
column 10, lines 41-63) teaches the preceding feature of claim 25. In particular, the Examiner 
has not identified the virtual record, the virtual ID, the attribute information receiving apparatus, 
and concealment of the virtual ID from the attribute information receiving apparatus when the 
virtual record is received by the attribute information receiving apparatus. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 25. 

Accordingly, Win does not teach the preceding feature of claim 25. 

In addition with respect to claim 27, Win does not teach the feature: "after said providing 
the virtual record to the attribute information receiving apparatus: providing, by the attribute 
information providing server, an attribute certificate to the attribute information receiving 
apparatus in relation to a new transaction between the subscriber and the attribute information 
receiving apparatus, wherein the attribute certificate pertains to the M attributes in the virtual 
record provided to the attribute information receiving apparatus" 

The Examiner argues: "Regarding claim 27, Win teaches after said providing the virtual 
record to the attribute information receiving apparatus: providing, by the attribute information 
providing server, an attribute certificate to the attribute information receiving apparatus in 
relation to a new transaction between the subscriber and the attribute information receiving 
apparatus, wherein the attribute certificate pertains to the M attributes in the virtual record 
provided to the attribute information receiving apparatus (column 5, lines 66 and 67, column 6, 
lines 1-9, column 17, lines 28-37, column 19, lines 56-63 and column 22, lines 41-46)." 
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In response, Applicants assert that the Examiner has not specifically identified in Win: 
the attribute information providing server, the attribute certificate, and the M attributes in the 
virtual record. Therefore, the Examiner's argument is vague and unclear. 

Moreover, the Examiner has not provided any analysis to demonstrate the Win (column 5, 
lines 66 and 67, column 6, lines 1-9, column 17, lines 28-37, column 19, lines 56-63 and column 
22, lines 41-46) teaches the preceding feature of claim 27. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 27. 

Accordingly, Win does not teach the preceding feature of claim 27. 

In addition with respect to claim 28, Win does not teach the feature: "wherein the 
attribute information providing server comprises: a customer record display unit for displaying 
the virtual record; an attribute selection unit for extracting the M attributes from the data record 
prior to said generating the virtual record; a virtual record generation unit for performing said 
generating the virtual record; a VID token issue unit for performing generating the virtual ID 
token prior to said providing the virtual token ID to the user device; a virtual record referencing 
unit for referencing the virtual record based on the VID prior to said providing the virtual record 
to the attribute information receiving apparatus; and a virtual record issue unit for performing 
said providing the virtual record to the attribute information receiving apparatus". 

The Examiner argues: "Regarding claim 28, Win teaches wherein the attribute 
information providing server comprises: a customer record display unit for displaying the virtual 
record (Figures 10a- 10c, column 17, lines 52-67 and column 18, lines 14-27); an attribute 
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selection unit for extracting the M attributes from the data record prior to said generating the 
virtual record (Figures 10a- 10c, column 12, lines 32-55, column 15, lines 35-52 and column 16, 
lines 13-58); a virtual record generation unit for performing said generating the virtual record 
(Figures lOa-lOc, column 12, lines 32-55, column 15, lines 35-52 and column 16, lines 13-58); a 
VID token issue unit for performing generating the virtual ID token prior to said providing the 
virtual token ID to the user device (Figures 5a, 5b and 5e, column 2, lines 42-67, column 10, 
lines 14-26 and 41-55, column 1 1 and lines 42-64); a virtual record referencing unit for 
referencing the virtual record based on the VID prior to said providing the virtual record to the 
attribute information receiving apparatus (Figures 10a- 10c, column 12, lines 32-55, column 15, 
lines 35-52 and column 16, lines 13-58); and a virtual record issue unit for performing said 
providing the virtual record to the attribute information receiving apparatus (Figures 1, 2 and 6-8, 
column 2, lines 42-67, column 5, lines 1-12 and column 26, lines 14-67, "remote computer can 
load the instructions into its dynamic memory and send the instructions over a telephone line via 
a modem" "Communication interface 918 provides a two-way data communication coupling to a 
network link 920 that is connected to a local network 922" and "Network link 920 typically 
provides data communication through one or more networks to other data devices")." 

In response, Applicants assert that the Examiner has not specifically identified in Win: 
the customer record display unit, the virtual record generation unit, the VID token issue unit; the 
virtual record referencing unit for referencing the virtual record based on the VID prior to said 
providing the virtual record to the attribute information receiving apparatus, and the virtual 
record issue unit. Therefore, the Examiner's argument is vague and unclear. 

Moreover, the Examiner has not provided any analysis to demonstrate the preceding 
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citations Win teach the preceding feature of claim 28. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 28. 

Accordingly, Win does not teach the preceding feature of claim 28. 

In addition with respect to claim 30, Win does not teach the feature: "wherein the VID 
token further comprises a URL of the attribute information providing server". 

The Examiner argues: "Regarding claim 30, Win teaches wherein the attribute 
information providing server is selected from the group consisting of a financial institution, an 
Internet Service Provider (ISP), and a shopping site on the network (column 26, lines 44-67)." 

In response, Applicants note that the Examiner appears to be arguing (from Win, col. 26, 
lines 44-67) that the attribute information providing server in Win is an Internet Service Provider 
(ISP). Specifically, Win, col. 26, lines 44-67 states that the ISP may represent the host 924 in 
Win, FIG. 9. 

From the language of claim 23 from which claim 30 depends, however, the ISP (alleged 
by the Examiner to represent the attribute information providing server) is required to perform 
"said receiving the request for the virtual ID token, said reading the data record from the 
database, said providing the data record to the user device, said receiving the selection of M 
attributes, said generating the virtual record, said storing the generated virtual record in the 
database, and said providing the virtual ID token to the user device", which Win does not teach 
and which the Examiner has not even addressed. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
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Win's alleged teaching of the preceding feature of claim 3-. 

Accordingly, Win does not teach the preceding feature of claim 30. 

In addition with respect to claim 3 1 , Win does not teach the feature: "receiving a 
selection of Ml attributes of the L attributes in the data record, wherein the Ml attributes are not 
identical to the M attributes". 

The Examiner argues: "Regarding claim 31, Win teaches receiving a selection of Ml 
attributes of the L attributes in the data record, wherein the Ml attributes are not identical to the 
M attributes (Figure 10b, column 3, lines 7-40, "storing, in the database an association of each 
resource to one or more of the roles", column 5, lines 13-20, column 11, lines 42-64, column 12, 
lines 32-55, column 15, lines 35-52 and column 26, lines 14-67, "remote computer can load the 
instructions into its dynamic memory and send the instructions over a telephone line via a 
modem" "Communication interface 918 provides a two-way data communication coupling to a 
network link 920 that is connected to a local network 922" and "Network link 920 typically 
provides data communication through one or more networks to other data devices")" 

In response, Applicants note that the Examiner has not specifically identified the Ml 
attributes and the M attributes of the L attributes in the data record. Therefore, the Examiner's 
argument is vague and unclear. 

Moreover, the Examiner has not provided any analysis to demonstrate the preceding 
citations Win teach the preceding feature of claim 3 1 . For example, the Examiner has not even 
addressed the claim feature of "wherein the Ml attributes are not identical to the M attributes". 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
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Win's alleged teaching of the preceding feature of claim 3 1 . 

Accordingly, Win does not teach the preceding feature of claim 31. 

In addition with respect to claim 31, Win does not teach the feature: "storing a second 
virtual record in the database, wherein the second virtual record comprises the Ml attributes, and 
wherein the attribute information providing server performs said receiving the selection of Ml 
attributes and said storing the second virtual record in the database". 

The Examiner argues: "Regarding claim 31, Win teaches ... storing a second virtual 
record in the database, wherein the second virtual record comprises the Ml attributes, and 
wherein the attribute information providing server performs said receiving the selection of Ml 
attributes and said storing the second virtual record in the database (column 3, lines 7-40, 
"storing, in the database an association of each resource to one or more of the roles", column 5, 
lines 13-20, column 11, lines 42-64, column 12, lines 32-55 and column 15, lines 35-52)." 

In response, Applicants note that the Examiner has not specifically identified in Win: the 
virtual record, the second virtual record as contrasted with the virtual record, the Ml attributes 
the L attributes in the data record, and the attribute information providing server. Therefore, the 
Examiner's argument is vague and unclear. 

Moreover, the Examiner has not provided any analysis to demonstrate the preceding 
citations Win teach the preceding feature of claim 3 1 

In addition, the Examiner has not even considered the limitation of "wherein the attribute 
information providing server performs said receiving the selection of Ml attributes and said 
storing the second virtual record in the database". 
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The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 31. 

Accordingly, Win does not teach the preceding feature of claim 3 1 . 

In addition with respect to claim 32, Win does not teach the feature: "wherein the data 
record comprises a globally-unique ID (GID) serving as a primary key of the data record, wherein 
the VID is a primary key of the virtual record, and wherein the VID is independent of the GID". 

The Examiner argues: "Regarding claim 32, Win teaches wherein the data record 
comprises a globally-unique ID (GID) serving as a primary key of the data record, wherein the 
VID is a primary key of the virtual record, and wherein the VID is independent of the GID 
(Figures lOa-lOc, column 12, lines 32-55, column 15, lines 35-52 and column 16, lines 13-58)." 

In response, Applicants note that the Examiner has not specifically identified in Win: the 
data record, the virtual record, the GID, and the VID. Therefore, the Examiner's argument is 
vague and unclear. 

Moreover, the Examiner has not provided any analysis to demonstrate the preceding 
citations in Win teach the preceding feature of claim 32. In particular, the Examiner has not 
explained how the preceding citations Win teach that: the GID serves as a primary key of the data 
record; the VID serves as a primary key of the virtual record, and the VID is independent of the 
GID. 

The Examiner has not persuasively supported the Examiner's allegation with respect to 
Win's alleged teaching of the preceding feature of claim 32. 

Accordingly, Win does not teach the preceding feature of claim 32. 
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35 U.S.C. § 103(a) 

The Examiner rejected claim 26 under 35 U.S.C. § 103(a) as allegedly being unpatentable 
over Win as applied to claim 23, as cited above, and further in view of United States Patent No. 
6,834,272 to Naor et al., hereinafter Naor. 

Since claim 26 depends from claim 23, which Applicants have argued supra to not be 
unpatentable over Win under 35 U.S.C. §102(b), Applicants maintain that claim 26 is likewise 
not unpatentable over Win in view of Naor under 35 U.S.C. § 103(a). 
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CONCLUSION 



Based on the preceding amendments, Applicant respectfully believe that all pending 
claims and the entire application meet the acceptance criteria for allowance and therefore request 
favorable action. If the Examiner believes that anything further would be helpful to place the 
application in better condition for allowance. Applicants invites the Examiner to contact 
Applicant's representative at the telephone number listed below. The Director is hereby 
authorized to charge and/or credit Deposit Account 09-0457 (IBM). 



Schmeiser, Olsen & Watts 
22 Century Hill Drive - Suite 302 
Latham, New York 12110 
Telephone (518) 220-1850 
Facsimile (518) 220-1857 
E-mail: jfriedman@iplawusa.com 





Jack P. Friedman 
Registration No. 44,688 
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